d8bbf2d84a533532848b4895833af517da967466375738988cf5b4c40f7213cf

Sharing

Copy URL Twitter E-mail

General

Target
d8bbf2d84a533532848b4895833af517da967466375738988cf5b4c40f7213cf
Size 973KB
Sample220503-zees1aegaq
SHA256 d8bbf2d84a533532848b4895833af517da967466375738988cf5b4c40f7213cf
MD5 916541e6803dd6f2339ddac435cc28bc
SHA1 088b005106dcf95ccb214902f9bd671bc386ae36
SHA512 c59dcae9683b9863c5b805ff9ce81070ef572c2108d4209b6ad64d005359e27f328a0f8e3acc26c4d85435e3f30d8e4e7fd2c6a8de8df380e961a87c2a6e377d
SSDEEP 24576:UYCQtllJ06DAvEObaoeUlZmY7tBfxZ9EbiqnK:UfilJVDAR3lHBfT9gi
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

d8bbf2d84a533532848b4895833af517da967466375738988cf5b4c40f7213cf

.exe 973KB

d8bbf2d84a533532848b4895833af517da967466375738988cf5b4c40f7213cf

IMPHASH bd0ccfffe29beda9bfd332e673d3d4c7
SHA256 d8bbf2d84a533532848b4895833af517da967466375738988cf5b4c40f7213cf
MD5 916541e6803dd6f2339ddac435cc28bc
SHA1 088b005106dcf95ccb214902f9bd671bc386ae36
SHA512 c59dcae9683b9863c5b805ff9ce81070ef572c2108d4209b6ad64d005359e27f328a0f8e3acc26c4d85435e3f30d8e4e7fd2c6a8de8df380e961a87c2a6e377d
SSDEEP 24576:UYCQtllJ06DAvEObaoeUlZmY7tBfxZ9EbiqnK:UfilJVDAR3lHBfT9gi
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

153625

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStdHandle VirtualProtect SetConsoleCursorPosition DecodePointer SetEndOfFile WriteConsoleW HeapReAlloc HeapSize GetTimeZoneInformation ReadFile ReadConsoleW PeekConsoleInputA ReadConsoleInputW GetNumberOfConsoleInputEvents SetConsoleMode CreateFileW GetProcessHeap GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW GetConsoleCP HeapFree HeapAlloc CompareStringW LCMapStringW GetFileType CloseHandle FlushFileBuffers GetConsoleMode GetFileSizeEx SetFilePointerEx WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo RaiseException

ole32

GetHGlobalFromStream RegisterDragDrop CreateILockBytesOnHGlobal OleIsRunning MonikerRelativePathTo

rtutils

TraceGetConsoleW TracePrintfExW RouterLogRegisterA TraceDeregisterW RouterLogEventStringA RouterLogEventW

shell32

SHQueryRecycleBinA SHChangeNotify

resutils

ResUtilGetEnvironmentWithNetName ResUtilGetProperty

setupapi

SetupInstallFromInfSectionW SetupDestroyDiskSpaceList SetupInstallFromInfSectionA